PT-2021-19637 · Unknown · Trusted Firmware-M

Published 2021-05-21 · Updated 2026-06-08 · CVE-2021-32032

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Trusted Firmware-M versions prior to 1.4

Description: The issue arises when cleaning up memory allocated for a multi-part cryptographic operation fails, preventing the abort() operation in the associated cryptographic library from freeing internal resources. This results in a memory leak.

Recommendations: For versions prior to 1.4, update to version 1.4 or later to resolve the memory leak issue. At the moment, there is no other information about additional mitigation measures for this issue.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2021-32032

Affected Products

Trusted Firmware-M

References · 8

• 🔥 https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/crypto_multi_part_ops_abort_fail.rst · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-32032 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32032 · Vendor Advisory
• https://trustedfirmware.org · Vendor Advisory
• https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/commit/?id=7e2e523a1c4e9ac7b9cc4fd551831f7639ed5ff9 · Patch
• https://t.me/cvenotify/14775 · Telegram Post
• https://t.me/cveNotify/166470 · Telegram Post
• https://t.me/cvenotify/15162 · Telegram Post